详解SSH如何配置key免密码登录
如何使用
直接指定ip然后-i指定key文件，然后指定用户
ssh1.1.1.1-iTest1-luserxxx
不指定用户实际上就是使用当前的本机登陆的用户名去登陆远端主机，比如本地用户是AAA，那么：
ssh1.1.1.1-iTest1
等同于
ssh1.1.1.1-iTest1-lAAA
这里要注意，生成的key是和一对用户绑定的，生成key的用户以及存储这个key的公钥的远端主机的用户。ssh的原理就是，公钥给人家，自己留秘钥，远端主机的其他用户也是无法看到这个指定的用户的接受到的公钥的，所以用户是一对一的。
比如我在test-server下面的azuo1228生成key，然后拷贝到远端主机dest-server去使用，那么放在远端主机的哪个用户home目录下面，对应的远端主机的这个用户才可以被无密码登陆，并不等于对远端主机的其他用户也能免密码登陆。
开始操作
1.生成key：
[azuo1228@test-server~]$ssh-keygen
这里一直敲回车就好
Generatingpublic/privatersakeypair. Enterfileinwhichtosavethekey(/home/azuo1228/.ssh/id_rsa): Createddirectory'/home/azuo1228/.ssh'. Enterpassphrase(emptyfornopassphrase): Entersamepassphraseagain: Youridentificationhasbeensavedin/home/azuo1228/.ssh/id_rsa. Yourpublickeyhasbeensavedin/home/azuo1228/.ssh/id_rsa.pub. Thekeyfingerprintis: d2:33:66:86:0a:b4:27:a9:86:92:24:ff:13:63:96:15azuo1228@test-server Thekey'srandomartimageis: +--[RSA2048]----+ || |E| |..| |.o.o| |..=.ooS| |+++*.=o| |=..o.o| |o..| |..| +-----------------+ [azuo1228@test-server~]$cd.ssh/ [azuo1228@test-server.ssh]$dir id_rsaid_rsa.pub
查看生产结果
[azuo1228@test-server.ssh]$ll total8 -rw-------1azuo1228administrator1675Dec2118:11id_rsa -rw-------1azuo1228administrator403Dec2118:11id_rsa.pub [azuo1228@test-server.ssh]$catid_rsa.pub ssh-rsaAAAAB3NzaC1yc2EAAAADAQABAAABAQCxp1CLe+v3L9OjlJCoBBMtQP5p2zQSACJuCD8rPRT2KQmLFznJo9ehTJQp3UfbSzAo3muudiJ9hvyL8f8hN05voXzBSyrul3v39iiqyPJGFbZhtlIsvVuHNEOVaa+StP/WVcH3nT50Y2TsIx0ikXUOVaaawHKUV3wBHlyLLANMAG8yOy4NIzCj++TO4n+66uyrgVvUf mZ02ALGGL0gUIV97tlhdwVQLG+2mJwSU0E3fksMVlhKxQrpaOx1OtObF0Xo4CmuuXAowtm/uW50gHRVYMA7N/VNgbWaa4hbypCV5m6UqF6P8bHp1Kgz0qm/U0ro1jFzNv1+fin2ZdwV1Ytrazuo1228@test-server
2.拷贝到远端主机指定用户的home下面
可以看到这次还是要输密码的
[azuo1228@test-server.ssh]$scpid_rsa.pubazuo1228@10.148.167.106:/home/azuo1228 AccessandAuthorizationtothisserveriscontrolledbyActiveDirectory.Pleaseloginwithyouradminaccount. azuo1228@10.148.167.106'spassword: id_rsa.pub100%4030.4KB/s00:00
在此测试登录--需要密码，还没免密码
[azuo1228@test-server.ssh]$sshazuo1228@10.148.167.106 AccessandAuthorizationtothisserveriscontrolledbyActiveDirectory.Pleaseloginwithyouradminaccount. azuo1228@10.148.167.106'spassword: Lastlogin:WedDec2118:07:212016fromshang1lu4gnl.ads.autodesk.com Authorizedusesonly.Allactivitymaybemonitoredandreported. [azuo1228@dest-server~]$
不存在.ssh的话需要创建
[azuo1228@dest-server~]$mkdir.ssh [azuo1228@dest-server~]$cd.ssh/ [azuo1228@dest-server.ssh]$cat../id_rsa.pub|tee-aauthorized_keys ssh-rsaAAAAB3NzaC1yc2EAAAADAQABAAABAQCxp1CLe+v3L9OjlJCoBBMtQP5p2zQSACJuCD8rPRT2KQmLFznJo9ehTJQp3UfbSzAo3muudiJ9hvyL8f8hN05voXzBSyrul3v39iiqyPJGFbZhtlIsvVuHNEOVaa+StP/WVcH3nT50Y2TsIx0ikXUOVaaawHKUV3wBHlyLLANMAG8yOy4NIzCj++TO4n+66uyrgVvUfmZ02ALGGL0gUIV97tlhdwVQLG+2mJwSU0E3fksMVlhKxQrpaOx1OtObF0Xo4CmuuXAowtm/uW50gHRVYMA7N/VNgbWaa4hbypCV5m6UqF6P8bHp1Kgz0qm/U0ro1jFzNv1+fin2ZdwV1Ytrazuo1228@test-server [azuo1228@dest-server.ssh]$ll total4 -rw-r--r--1azuo1228administrator403Dec2120:33authorized_keys
需要权限为600
[azuo1228@dest-server.ssh]$chmod600authorized_keys [azuo1228@test-server.ssh]$sshazuo1228@10.148.167.106 AccessandAuthorizationtothisserveriscontrolledbyActiveDirectory.Pleaseloginwithyouradminaccount. Lastlogin:WedDec2120:32:082016fromc72 Authorizedusesonly.Allactivitymaybemonitoredandreported. [azuo1228@dest-server~]$ [azuo1228@dest-server~]$ [azuo1228@dest-server~]$exit logout Connectionto10.148.167.106closed.
再次登陆，就已经免密了
[azuo1228@test-server.ssh]$ssh10.148.167.106 AccessandAuthorizationtothisserveriscontrolledbyActiveDirectory.Pleaseloginwithyouradminaccount. Lastlogin:WedDec2120:33:342016fromc72 Authorizedusesonly.Allactivitymaybemonitoredandreported.
在尝试登陆zhour用户，依旧要密码，可见免密过程是一对一的。
[azuo1228@test-server.ssh]$ssh10.148.167.106-lzhour AccessandAuthorizationtothisserveriscontrolledbyActiveDirectory.Pleaseloginwithyouradminaccount. zhour@10.148.167.106'spassword:
拷贝公钥到另一个用户zhour
[azuo1228@test-server.ssh]$scpid_rsa.pubzhour@10.148.167.106:/home/zhour AccessandAuthorizationtothisserveriscontrolledbyActiveDirectory.Pleaseloginwithyouradminaccount. zhour@10.148.167.106'spassword: id_rsa.pub100%4030.4KB/s00:00
登陆依旧需要密码
[azuo1228@test-server.ssh]$ssh10.148.167.106-lzhour AccessandAuthorizationtothisserveriscontrolledbyActiveDirectory.Pleaseloginwithyouradminaccount. zhour@10.148.167.106'spassword: Lastlogin:WedDec2117:55:322016fromshang1lu4gnl.ads.autodesk.com Authorizedusesonly.Allactivitymaybemonitoredandreported.
添加公钥给zhour
[zhour@dest-server.ssh]$cat../id_rsa.pub|tee-aauthorized_keys ssh-rsaAAAAB3NzaC1yc2EAAAADAQABAAABAQCxp1CLe+v3L9OjlJCoBBMtQP5p2zQSACJuCD8rPRT2KQmLFznJo9ehTJQp3UfbSzAo3muudiJ9hvyL8f8hN05voXzBSyrul3v39iiqyPJGFbZhtlIsvVuHNEOVaa+StP/WVcH3nT50Y2TsIx0ikXUOVaaawHKUV3wBHlyLLANMAG8yOy4NIzCj++TO4n+66uyrgVvUfmZ02ALGGL0gUIV97tlhdwVQLG+2mJwSU0E3fksMVlhKxQrpaOx1OtObF0Xo4CmuuXAowtm/uW50gHRVYMA7N/VNgbWaa4hbypCV5m6UqF6P8bHp1Kgz0qm/U0ro1jFzNv1+fin2ZdwV1Ytrazuo1228@test-server
这样就免密了
[azuo1228@test-server.ssh]$ssh10.148.167.106-lzhour AccessandAuthorizationtothisserveriscontrolledbyActiveDirectory.Pleaseloginwithyouradminaccount. Lastlogin:WedDec2120:34:492016fromc72 Authorizedusesonly.Allactivitymaybemonitoredandreported.
注意
需要注意两点，如下：
免密之后，scp这种走ssh通道的都会免密；
key拷贝到远程主机的指定用户home目录下，最后，免输入密码的时候是远端主机的指定用户，非本地主机的用户
总结
以上就是这篇文章的全部内容了，希望本文的内容对大家的学习或者工作能带来一定的帮助，如果有疑问大家可以留言交流，谢谢大家对毛票票的支持。